Supabase development guidelines for database, authentication, real-time subscriptions, and Edge Functions.
Install
npx skills add https://github.com/mindrally/skills --skill supabase-developmentSKILL.md
Supabase Development
You are an expert in Supabase development including database design, authentication, real-time features, and Edge Functions.
Core Principles
- Use Supabase client for all database interactions
- Implement Row Level Security (RLS) policies for data protection
- Leverage Supabase Auth for user management
- Use real-time subscriptions for live updates
Database Design
Schema Best Practices
- Use proper PostgreSQL types and constraints
- Implement foreign key relationships
- Create indexes for frequently queried columns
- Use views for complex queries
- Implement soft deletes where appropriate
Row Level Security
- Always enable RLS on tables with user data
- Write policies for SELECT, INSERT, UPDATE, DELETE
- Test policies thoroughly before deployment
- Use service role only for admin operations
Authentication
- Implement OAuth providers (Google, GitHub, etc.)
- Handle auth state changes reactively
- Use auth helpers for framework integration
- Implement proper session management
- Handle password reset and email verification
Real-Time Features
- Use subscriptions for live data updates
- Implement presence for user online status
- Handle connection state changes
- Optimize subscription filters for performance
Edge Functions
- Write functions in TypeScript/Deno
- Handle CORS properly
- Implement proper error responses
- Use environment variables for secrets
- Test locally before deployment
Storage
- Organize files in buckets by purpose
- Implement proper access policies
- Use signed URLs for private files
- Handle file uploads with proper validation
Integration Patterns
Next.js
- Use
@supabase/ssrfor server-side auth - Implement middleware for protected routes
- Handle auth in Server Components
SvelteKit
- Use
@supabase/auth-helpers-sveltekit - Implement hooks for auth handling
- Use load functions for data fetching
Performance
- Use connection pooling for high traffic
- Implement caching strategies
- Optimize queries with proper indexes
- Use pagination for large datasets
Related skills
entra-app-registrationmicrosoft606KGuides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication. DO NOT USE FOR: Key Vault secrets (use azure-keyvault-expiration-audit), general Azure resource security guidance.azure-messagingmicrosoft595KTroubleshoot and resolve issues with Azure Messaging SDKs for Event Hubs and Service Bus. Covers connection failures, authentication errors, message processing issues, and SDK configuration problems. WHEN: event hub SDK error, service bus SDK issue, messaging connection failure, AMQP error, event processor host issue, message lock lost, message lock expired, lock renewal, lock renewal batch, send timeout, receiver disconnected, SDK troubleshooting, azure messaging SDK, event hub consumer, servicentra-agent-idmicrosoft328KProvision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmi_path, OBO, cross-tenant) including the Microsoft Entra SDK for AgentID sidecar. USE FOR: Agent Identity Blueprint, BlueprintPrincipal, agent OAuth, fmi_path token exchange, agent OBO, Workload Identity Federation for agents, polyglot agent auth, Microsoft.Identity.Web.AgentIdentities. DO NOT USE FOR: standard Entra app registsupabasesupabase298KUse when doing ANY task involving Supabase. Triggers: Supabase products (Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, Queues); client libraries and SSR integrations (supabase-js, @supabase/ssr) in Next.js, React, SvelteKit, Astro, Remix; auth issues (login, logout, sessions, JWT, cookies, getSession, getUser, getClaims, RLS); Supabase CLI or MCP server; schema changes, migrations, declarative schemas, security audits, Postgres extensions (pg_graphql, pg_cron, pg_vector); deb